Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa
File:                     d80a2159-d927-35e8-bb93-b67e02d8813c.roa (raw, json)
Hash identifier:          EKmFCmS9T0q+3MfnezDtcUw/+loNN5VjXxFP0FnZ9PU=
Subject key identifier:   80:24:15:10:6F:15:F3:04:7E:2E:BF:77:B4:09:93:95:7C:3B:46:45
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584E94EA85694A9298E69B9340C0
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     152900
IP address blocks:        104.250.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:85:69:4a:92:98:e6:9b:93:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=9e0d0eb1-1276-442b-af29-6b2a7f6db5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:c9:65:24:d0:95:9f:50:19:58:09:a7:c8:
                    f4:37:ef:e7:92:1d:aa:ac:58:e7:f5:3a:dc:23:18:
                    1f:67:ea:33:a4:29:9c:37:f4:dc:c1:39:c0:15:35:
                    b5:72:26:ed:8f:57:fb:28:1d:ce:8a:8b:42:88:4e:
                    97:19:b0:33:e4:41:01:bb:49:cd:e1:44:97:a7:56:
                    e7:49:4e:4f:68:8b:3f:1d:7e:13:78:98:b4:60:13:
                    84:5a:18:fc:09:de:a8:b3:0f:ef:a4:c5:ba:e8:b3:
                    9b:11:a3:65:87:19:6b:6d:61:8f:45:03:ec:91:7f:
                    f6:a5:b6:85:73:7e:71:85:cc:f0:ff:90:d2:d2:42:
                    fd:b6:dc:df:b5:ac:88:8a:21:77:53:36:3d:a9:3a:
                    cb:38:87:b4:e9:63:2a:86:f4:d0:e4:06:57:4b:4f:
                    70:f6:2e:d0:e3:4f:01:68:10:7f:50:72:17:64:1b:
                    75:c4:d8:95:5f:99:b8:d3:06:38:34:e5:d8:9c:4d:
                    a3:12:2e:06:8c:bc:69:77:f0:c6:b4:40:49:c7:f6:
                    5e:0c:84:db:25:80:70:74:3d:32:ae:41:cf:71:ba:
                    bf:f1:f5:1c:09:10:93:f7:91:be:43:68:67:23:dd:
                    77:dd:2b:07:4d:4c:e6:5d:d9:7d:9c:89:ba:db:0b:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:15:10:6F:15:F3:04:7E:2E:BF:77:B4:09:93:95:7C:3B:46:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:8e:50:f7:f0:8d:57:e7:8d:e2:00:80:91:90:e9:75:d3:
         fa:54:0c:38:d9:8e:3e:d4:9a:89:aa:5a:8d:ff:75:2e:e6:1e:
         55:3b:28:b1:4e:b4:65:9a:9c:67:8c:da:40:d5:75:44:34:22:
         6b:e8:b3:15:8e:d4:78:51:24:c0:03:bd:c5:88:a2:ea:31:3f:
         ff:e9:98:4d:a5:75:0b:af:51:63:96:c4:df:46:9c:ed:9c:2f:
         b5:9d:8d:73:a2:a9:8b:9c:d0:bf:98:7f:5f:a1:5a:b3:8c:30:
         36:21:a0:16:0d:ff:97:a9:f7:49:6b:b7:b6:14:6a:df:d3:e2:
         ca:f4:da:93:c2:0b:d2:33:0e:06:68:68:58:ee:11:b5:46:d1:
         27:b7:37:23:fe:12:61:db:9b:de:59:bd:0f:2a:2f:1b:a7:b3:
         90:02:c9:b3:12:fc:d8:eb:df:c8:43:3f:fb:24:11:76:c3:7e:
         11:c5:2e:97:63:70:5b:e0:d4:92:b3:92:75:61:98:14:18:44:
         60:13:31:5d:fa:d0:05:5c:b2:c4:59:47:8d:2b:1b:8f:eb:cb:
         ce:ee:c6:48:09:70:4e:a2:d5:15:ed:68:5a:81:58:90:39:a2:
         58:de:06:e6:ed:74:e2:ea:e9:49:08:f4:a6:32:72:91:70:e3:
         43:81:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:54 2026 by rpki-client